azu/
A CLI tool for digest pinning — adds @sha256:<digest> to Dockerfile, docker-compose.yml, and GitHub Actions to prevent supply chain attacks.
by azu Go MIT licence 4 forks Created Mar 2026 View on GitHub
- Stars
- 91
- 1% of azu's stars
- Rank
- #522,628
- of 849,475 repos, top 62%
- In Go
- #23,181
- of 34,874 repos, top 67%
Among 849,475 repos
63–100 stars: 217,070 repos, including dockerfile-pin
top 50%top 10%top 1%top 0.1% 
Stars along the bottom, and repos in each band on a log scale
Quick stats
- Next rank
- +1 star to reach #517,883
- Next milestone
- +3 stars to reach the top 60%